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IN THE CLAIMS 

1 . (Currently Amended) A method of securely providing content data to a user's system 
over a web broadcast infrastructure with a plurality of channels, the method comprising 
the steps of: 

encrypting content data using a first encrypting key to form encrypted content v 
data, wherein the first encrypting key is a symmetric key with a corresponding first 
decrypting key; 

encrypting the first decrypting key, using a second encrypting key of a trusted 
third party; 

broadcasting promotional metadata related to at least part of the encrypted 
content data on a first web broadcast channel for reception by at least one user's 
system; 

sending at least part of t he encrypted content data over a second channel; 

transferring the encrypted first decrypting key, which has been encrypted with the 
second encrypting key, to the user's system via a computer readable medium; 

transferring the encrypted first decrypting key, which has been encrypted with the 
second encrypting key to the trusted third party; 

receiving the encrypted first decrypting key, which has been decrypted by the 
trusted third party and re-encrypted with a user's system key; and 

decrypting, on the user's system in a tamper resistant environment, the 
encrypted first decrypting key with the user's system key. 

2. (Original) The method as defined in claim 1, wherein the step of broadcasting the 
promotional metadataincludes broadcasting the promotional metadata periodically over 
a predetermined time interval. 

3. (Previously Presented) The method as defined in claim 1 , wherein the step of 
broadcasting the promotional metadata includes the sub-step of: 
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converting at least the promotional metadata into a format readable by a web 
browser. 

4. (Previously Presented) The method as defined in claim 1, wherein the step of 
sending at least part of the encrypted content data includes broadcasting a schedule of 
a broadcast time and web broadcast channel for at least part of the encrypted content 
data. 

5. (Previously Presented) The method as defined in claim 1 , wherein the step of 
sending at least part of the encrypted content data over a second channel includes 
broadcasting the encrypted content data in a format compatible with DirecPC™. 

6. (Previously Presented) The method as defined in claim 1, wherein the promotional 
metadata contains a schedule of broadcast times for the encrypted content data. 

7. (Previously Presented) A method of securely receiving content data on a user's 
system from a web broadcast infrastructure with a plurality of channels, the method 
comprising the steps of: 

receiving promotional metadata from a first web broadcast channel, the 
promotional metadata related to encrypted content data; 

assembling at least part of the promotional metadata into a promotional offering 
for review by a user; 

selecting by a user, encrypted content data to be received related to the 
promotional offering metadata; 

retrieving the encrypted content data from a user's system via a second-channel, 
the encrypted content data selected from the promotional metadata, and wherein the 
encrypted content data has been previously encrypted using a first encrypting key, 
wherein the first encrypting key is a symmetric key with a corresponding first decrypting 
key, wherein the second channel is selected from the group consisting of a 
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telecommunications network, a broadcast transmission, and a computer removable 
storage medium; 

receiving the first decrypting key via a computer readable medium, the first 
decrypting key for decrypting at (east some of the encrypted content data received via 
the second web broadcast channel, wherein the first decrypting key has been encrypted 
with a second encrypting key of a trusted third party; 

transferring the encrypted first decrypting key, which has been encrypted with the 
second encrypting key to the trusted third party; 

receiving the encrypted first decrypting key, which has been decrypted by the 
trusted third party and re-encrypted with a user's system key; and 

decrypting, on the user's system in a tamper resistant environment, the 
encrypted first decrypting key with the user's system key. 

8. (Original) The method as defined in claim 7, wherein the step of assembling at least 
part of the promotional data includes assembling at least part of the promotional data 
into a format readable by a web browser and wherein the step of selecting includes 
selecting with a web browser. 

9. (Previously Presented) The method as defined in claim 7, wherein the step of 
selecting includes selecting promotional material that has been previously received and 
stored on the user's system. 

10. (Previously Presented) The method as defined in claim 9, wherein the step of 
selecting further comprises the sub-steps of: 

determining a schedule for next web broadcast of the encrypted content data 
selected; 

setting a trigger to trigger the user's system to receive the next web broadcast on 
the second channel. 
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1 1 . (Previously Presented) The method as defined in claim 1 0, wherein the step of 
retrieving encrypted content data from a second channel, includes receiving the 
encrypted content data selected from the promotional metadata on a web broadcast 
channel and a time provided by the trigger. 

12. (Previously Presented) The method as defined in claim 7, wherein the step of 
retrieving encrypted content data from a second channel includes receiving data in a 
format compatible with DirecPC™. 

13. (Previously Presented) The method as defined claim 7, wherein the step of 
receiving data from a second channel includes the sub-step of: 

authorizing over a back channel that the user's system is authorized to receive 
the data selected; and wherein the step of receiving the first decrypting key includes 
receiving the first decrypting key only if the user's system is authorized to receive the 
encrypted content data selected. 

14. (Previously Presented) The method as defined claim 7, wherein the step of 
receiving encrypted content data from a second channel further includes the sub-step 

of: 

notifying the user the next time the user starts the user's system a status if the 
current data selected from the promotional metadata has been received on the user's 
system. 

15. (Previously Presented) The method as defined in claim 7, wherein the step of 
receiving the encrypted content data, includes receiving the encrypted content data 
along with a network address of the trusted third party. 

16. (Original) The method as defined in claim 15, wherein the step of receiving the first 
decrypting key includes receiving the first decrypting key over a broadcast stream. 
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17. (Previously Presented) The method defined in claim 15, wherein the network 
address of the trusted third party is an address of a clearinghouse. 

18. (Previously Presented) The method defined in claim 15, wherein the first decrypting 
key has a timeout provision for decrypting data. 

19. (Previously Presented) A system for securely providing content data to a user's 
system over a web broadcast infrastructure with a plurality of channels, the system 
comprising: 

a content system; 
a first public key; 

a first private key, which corresponds to the first public key; 
a data encrypting key; 

a data decrypting key for decrypting data encrypted using the data encrypting 
key, wherein the first encrypting key is a symmetric key with a corresponding first 
decrypting key; 

first data encryption means for encrypting data to form encrypted content data so 
as to be decryptable only by the data decrypting key; 

second data encryption means, using the first public key, for encrypting the data 
decrypting key; 

a clearing house; 

a broadcast center, for broadcasting to one or more user's systems on a first 
web broadcast channel, promotional metadata related to data being broadcasted on a 
second web broadcast channel, and sending on the second channel encrypted content 
data, wherein the second channel is selected from the group consisting of a 
telecommunications network, a broadcast transmission, and a computer removable 
storage medium; 
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at least one user system with a first receiver means for receiving the data 
decrypting key which has been encrypted; 

first transferring means for transferring the data decrypting key which has been 
encrypted, to the clearing house, wherein the clearinghouse possesses the first private 
key; 

first decrypting means for decrypting the data decrypting key using the first 
private key; 

a second public key of the user's system; 

a second private key; which corresponds to the second public key; 
re-encryption means for re-encrypting the data decrypting key using the second 
public key; 

second transferring means for transferring the re-encrypted data decrypting key 
to the user's system, wherein the user's system possesses the second private key; 

second decrypting means for decrypting the re-encrypted data decrypting key 
using the second private key; and 

decrypting, on the user's system in a tamper resistant environment, the 
encrypted data decrypting key-with the first private key. 

20. (Original) The system as defined in claim 19, wherein the promotional metadata 
contains a schedule of broadcast times for the data. 

21. (Previously Presented) A user's system for securely receiving data from a web 
broadcast infrastructure with a plurality of channels, comprising: 

a receiver for receiving promotional metadata from a first web broadcast 
channel, the promotional metadata related to data available for reception; 

an interface to an output device for presenting at least part of the promotional 
metadata for review by a user; 

an interface to an input device for receiving a selection by a user of the data to 
be received related to the promotional metadata; 
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a controller for controlling the receiver to receive data from a second web 
broadcast channel, the data selected from the promotional metadata, and wherein the 
data has been previously encrypted using a first encrypting key, wherein the first 
encrypting key is a symmetric key with a corresponding first decrypting key, wherein the 
second channel is selected from the group consisting of a telecommunications network, 
a broadcast transmission, and a computer removable storage medium; and 

an interface for receiving the first decrypting key via a computer readable 
medium, the first decrypting key for decrypting at least some of the data received via 
the second web broadcast channel, wherein the first decrypting key has been encrypted 
with a second encrypting key of a trusted third party; 

transferring the encrypted first decrypting key, which has been encrypted with the 
second encrypting key to the trusted third party; 

receiving the encrypted first decrypting key, which has been decrypted by the 
trusted third party and re-encrypted with a user's system key; and 

decrypting, on the user's system in a tamper resistant environment the 
encrypted first decrypting key with the user's system key; 

wherein the tamper resistant environment forms reencrypted content data by 
reencrypting the content data with a locally generated digital content player encrypting 
key. 

22. (Original) The user's system as defined in claim 21, wherein the output device is a 
web browser and the input device is coupled to the web browser for receiving a 
selection by a user. 

23. (Original) The user's system as defined in claim 21 , wherein the controller further 
comprises: 

a schedule derived from the promotional metadata wherein the schedule is used 
to control the receiver to receive data from a second web broadcast channel. 

Docket No. SE9-99-020 Page 8 of 1 2 S/N 09/487,41 7 



PACE 10/14 * RCVD AT 3/9/2005 5:03:07 PM (Eastern Standard Time] * SVR:USPTO-EFXRF-1/10 * DNIS:8729306 * CSID:561 089 0812 • DURATION (mm-ss):05-04 



93/09/2005 17:00 561-989-9812 



FLEIT KAIN ET AL. 



PAGE 11/14 



24. (Original) The user's system as defined in claim 21 , wherein the receiver is adapted 
to receive data broadcasted in a format compatible with DirecPC™. 

25. (Currently Amended) A computer program product for securely providing content 
data to a user's system over a web broadcast infrastructure with a plurality of channels, 
the computer program product comprising: 

a storage medium readable by a processing circuit and storing instructions for 
execution by the processing circuit for performing a method comprising: 

encrypting content data using a first encrypting key to form encrypted 
content data, wherein the first encrypting key is a symmetric key, with a 
corresponding first decrypting key; 

encrypting the first decrypting key, using a second encrypting key; 

broadcasting promotional metadata related to at least part of the 
encrypted content data on a first web broadcast channel for reception by at least 
one user's system; 

sending at least part of the encrypted content data over a second 
channel; 

transferring the encrypted first decrypting key ( which has been encrypted 
with the second encrypting key of a trusted third party, to the user's system via a 
computer readable medium; 

transferring the encrypted first decrypting key, which has been encrypted 
with the second encrypting key to the trusted third party; 

receiving the encrypted first decrypting key, which has been decrypted by 
the trusted third party and re-encrypted with a user's system key; and 

decrypting, on the user's system in a tamper resistant environment, the 
encrypted first decrypting key with the user's system key. 
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